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METHODS, COMPUTER SYSTEMS, AND COMPUTER READABLE MEDIA 
FOR GENERATING DISPLAYS OF NETWORKING ADDRESSES 

TECHNICAL FIELD 

The present invention is related to networking address space. More particularly, 
the present invention is related to the generation of displays providing information 
regarding the networking address space. 

BACKGROUND 

Networking addresses serve to identify devices and/or locations on a network and 
may include various classes of information, including telephone numbers, medium access 
control values corresponding to layer 2 of the communications protocol stack, Intemet 
Protocol ("IP") addresses corresponding to layer 3 of the communications protocol stack. 
Autonomous System Numbers ("ASN") corresponding to layer 4 of the communications 
protocol stack, serial numbers, and others. Furthermore, each of the classes of 
networking addresses may have variations. For example, IP addresses may be of 
different varieties such as Intemet Protocol version 4 ("IPv4") and Intemet Protocol 
version 6 ("IPv6"). 

Networking addresses such as these must be maintained by an organization and 
managed appropriately. Such management must insure that no two devices, and/or 
locations depending upon the class of network addresses, are assigned the same 
networking address in a common routing area of a network. Additionally, these 
addresses must be managed appropriately so that networking addresses are assigned to 
maximize routing table efficiency. Furthermore, because networking addresses are 
limited commodities, if the available addresses are not appropriately managed, then 
addresses may be wasted by being unused while a need exists for those addresses. Thus, 
address uniqueness and appropriate distribution are important factors in network 
performance. 

Conventionally, networking addresses are managed through the manual use of a 
text listing or a spreadsheet. The spreadsheet may consist of a column of networking 
addresses or blocks of addresses, with additional columns containing attributes of each 
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address or block of addresses. The information in the cells of the text listing or 
spreadsheet is updated when the set of managed addresses or the attributes of the 
addresses have changed. Accordingly, the network administrator must study the 
spreadsheet to find out the attribute value(s) for a particular networking address or block 
5 of addresses. For example, a particular sheet of a spreadsheet may represent a particular 
network so that the networking addresses on this particular sheet are those designated for 
that network. Furthermore, one or more columns within a sheet may represent the status 
of the address block while another column represents the associated network equipment 
for allocated addresses. Tables 1 and 2 discussed below provide examples of spreadsheet 

10 layouts that are used to manually keep track of networking addresses. 

The conventional method of manually tracking network addresses in a 
spreadsheet provides the administrator with no management tools other than the raw 
information within the spreadsheet cells. A text listing or spreadsheet may display at 
most a few hundred data elements in a concise format, whereas an administrator may be 

1 5 responsible for milUons of addresses. Furthermore, views of the data are limited to the 
original organization of the data, for example, in order of address, which requires manual 
searches or additional utilities to access the information by another perspective, i.e. 
addresses of a particular status. For address formats such as IP that use classless 
interdomain routing ("CIDR") based numbering, addresses may be administered in 

20 blocks of very specific sizes and boundaries. These limits are not obvious in the 
conventional spreadsheet method except perhaps to those administrators with a thorough 
familiarity with the address format, which makes the administration of the addresses 
more difficult. 

The lack of a visual representation creates problems for the administrator because 
25 it is difficult to see relationships between the networking addresses of a set for even 
moderate numbers of addresses. For example, the administrator may need to quickly see 
the relative number of networking addresses assigned to a first network relative to a 
second network. Furthermore, the administrator may need to quickly see the relative 
number of allocated networking addresses for a network relative to the number of fi'ee 
30 networking addresses. It is a cumbersome and time-consuming task to find such 
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information by scanning cells of a spreadsheet, and the administration of the networking 
addresses is made inefficient as a result. 

SUMMARY 

5 Embodiments of the present invention address these issues and others by 

providing displays of networking address space. The displays may provide visual 
indicators of attribute values for the networking addresses so that it can be easily seen 
which networking addresses have a particular attribute value relative to others and/or the 
relative amount of address space having one attribute value or another. Accordingly, an 

10 administrator may rely upon such displays of network space when controlling how the 
network space is used. 

One embodiment is a computer-implemented method of illustrating networking 
addresses. The method involves accessing definitional information of a set of the 
networking addresses, the definitional information defining one or more attributes for the 

15 networking addresses of the set. The method also involves rendering a display of the set 
of networking addresses wherein the display provides a first visual indicator for 
networking addresses having a first value of a first attribute and a second visual indicator 
for networking addresses having a second value of the first attribute. 

Another embodiment is a computer system for illustrating networking addresses. 

20 The computer system includes storage containing definitional information of a set of the 
networking addresses, and the definitional information defines one or more attributes for 
the networking addresses of the set. The computer system also includes a display device 
and a processing device configured to initiate a display of the set of networking addresses 
on the display device. The display provides a first visual indicator for networking 

25 addresses having a first value of a first attribute and a second visual indicator for 
networking addresses having a second value of the first attribute. 

Another embodiment is a computer readable medium containing instructions that 
when performed by a computer perform various steps. The steps include determining 
values of an attribute for a pluraUty of networking addresses. The steps further include 

30 rendering a display of the plurality of networking addresses wherein the display includes 
a first indicator for networking addresses having a first value for the attribute and 
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includes a second indicator for networking addresses having a second value for the 
attribute. 

Another embodiment is a computer-implemented method of illustrating 
networking address structure. The method involves accessing definitional information of 
5 a set of the networking addresses, the definitional information defining at least one root 
network and at least one subordinate network of the root network for the networking 
addresses of the set. The method further involves rendering a display of the at least one 
root network and at least one subordinate network of the root network, wherein the 
display is a tree illustrating a hierarchical structure of the root and subordinate networks. 

10 Another embodiment is a computer-implemented method of illustrating 

networking addresses. The method involves constructing a multi-dimensional 
arrangement of a linear index of networking addresses, in which each position in the 
arrangement corresponds to a specific value or group of values of the index. The data set 
includes definitional information of the networking addresses defining one or more 

1 5 attributes associated with each network address. The arrangement is displayed such that 
at each position in the arrangement, a first visual indicator is provided for the network 
addresses having a first value for the first attribute and a second visual indicator is 
provided for the network addresses having a second value for the first attribute. 



20 DESCRIPTION OF THE DRAWINGS 

FIG. 1 shows a typical operating environment for embodiments of the present 
invention including a typical architecture of a computer where displays of network space 
may be provided. 

FIGS. 2-5 show a set of logical operations performed when rendering displays of 
25 networking addresses. 

FIG. 6 shows an example of a two-dimensional grid system for rendering displays 
of networking addresses according to the logical operations of FIG. 5. 

FIG. 7 is a screenshot of a displayed range of networking addresses and related 
status in block format for local blocks of a chosen network division where each position 
30 in the display is an individual network address block that is individually selectable. 



4 



i. »• 

Atty Docket No. 60088.0001US01 

FIG. 8 is a screenshot of the displayed range of networking addresses in block 
format for the various networks corresponding to the chosen network division. 

FIG. 9 is a screenshot of the displayed range of networking addresses and related 
status in block format including both the local blocks and descendants of the chosen 
5 network division. 

FIG. 1 0 is a screenshot of the displayed range of networking addresses and related 
status in utilization format for local blocks of the chosen network division. 

FIG. 11 is a screenshot of the displayed range of networking addresses in 
utilization format for the various networks defined for the chosen network division. 
10 FIG. 12 is a screenshot of the displayed range of networking addresses and related 

status in utilization format including both the local blocks and descendants defined for 
the chosen network division. 

FIG. 13 is a screenshot of the displayed range of networking addresses and related 
status in block format including only the local blocks defined for the chosen network 
15 division after a zoom out to space having a mask size of 16 bits. 

FIG. 14 is a screenshot of a zoomed out display range of networking addresses 
and related status in block format including the local blocks and descendents defined for 
the chosen network division prior to a selection of the networking addresses defined for 
the chosen network division being selected to zoom in to space having a mask size of 24 
20 bits. 

FIG. 15 is a screenshot of the displayed range of networking addresses in 
utilization format for the various networks defined for the chosen network division with a 
tree structure in expanded form to illustrate the hierarchy of the various networks based 
on a single addressing format. 

25 FIG. 16 is a screenshot of a displayed range of networking addresses in blocks 

format for the chosen network division with a tree structure in expanded form to illustrate 
the hierarchy of the various networks based on multiple addressing formats. 

FIG. 17 illustrates a set of logical operations for rendering a display of a tree 
structure of networking addresses. 

30 FIG. 18 is a screenshot of a displayed range of network addresses in block format 

in an alternative layout that includes additional features. 
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FIG. 1 9 is a screenshot including a tree structure that includes icons providing an 
indication of networks that are aggregate branch roots. 

FIG. 20 is a screenshot of a displayed range of network addresses in block format 
with enhanced menu selections for adding grid lines, rulers, crosshairs, and plot range. 
5 FIG. 21 is a screenshot of a displayed range of network addresses in block format 

with enhanced menu options and with enhanced tool tips. 

FIG. 22 is a screenshot of a displayed range of network addresses in block format 
with enhanced menu options and tool tips and with the legend representing only those 
networks that are found within the plot range. 
10 FIG. 23 is a screenshot of a displayed range of network addresses in block format 

with enhanced menu options and also including enhanced block lists to illustrate those 
blocks appearing in the current plot range. 

FIG. 24 is a screenshot of a displayed range of network addresses in block format 
with crosshairs enabled as a visual indicator for undersized blocks present in the grid 
15 square. 

FIG. 25 is a screenshot of a displayed range of network addresses in utilization 
mode with a visual display of the total number of blocks of addresses present in the 
selected plot range. 

FIG. 26 is a table representing the text listing of networking space used to 
20 produce a map and/or tree display. 

FIG. 27 is a table representing the text listing of networking space used to 
produce a map and/or tree display including mixed types of addresses. 

FIG. 28 is a table representing the text listing of networking space used to 
produce a map and/or tree display including mixed types of addresses and including 
25 additional aggregation information and also representing the corresponding icons used to 
render the tree display. 

FIG. 29 shows a first example of a two-dimensional grid system for rendering 
displays of networking addresses where the plot range is not defined along a byte 
boundary but is instead defined along a byte + 2 bits. 
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FIG. 30 shows a second example of a two-dimensional grid system for rendering 
displays of networking addresses where the plot range is not defined along a byte 
boundary but is instead defined along a byte + 2 bits. 

FIG. 3 1 shows a first example of a two-dimensional grid system for rendering 
5 displays of networking addresses where the plot range is not defined along a byte 
boundary but is instead defined along a byte + 4 bits. 

FIG. 32 shows a second example of a two-dimensional grid system for rendering 
displays of networking addresses where the plot range is not defined along a byte 
boundary but is instead defined along a byte + 4 bits. 
10 FIG. 33 shows a first example of a two-dimensional grid system for rendering 

displays of networking addresses where the plot range is not defined along a byte 
boundary but is instead defined along a byte + 6 bits. 

FIG. 34 shows a second example of a two-dimensional grid system for rendering 
displays of networking addresses where the plot range is not defined along a byte 
1 5 boundary but is instead defined along a byte + 6 bits. 

FIG. 35 a set of logical operations performed when rendering displays of 
networking addresses where undersized blocks are indicated by single or double 
crosshairs within the map display. 



20 DETAILED DESCRIPTION 

Embodiments of the present invention provide visual displays of networking 
address space to allow administrators and others to visually see how the networking 
address space is being utilized. This visual information is displayed to assist the 
administrators and others when making determinations about the networking address 
25 space. For example, the visual information may assist the administrator in determining 
how effectively the networking address space is being used and when making 
determinations about how to modify the usage of networking address space as the need 
arises. 

The embodiments of the present invention are implemented in a computer setting. 
30 A standalone computer may implement embodiments of the present invention. 
Altematively, embodiments of the present invention may be implemented on a networked 
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basis where resources are distributed over the network and are accessed through the 
network as necessary. A typical operating environment for both the standalone 
implementation and the network-based implementation are shown in FIG. 1 . 

FIG. 1 and the following discussion are intended to provide a brief, general 
5 description of a suitable computer system environment in which the invention may be 
implemented. While the invention will be described in the general context of program 
modules that execute in conjunction with application programs that run on an operating 
system on a personal computer, those skilled in the art will recognize that the invention 
may also be implemented in combination with other program modules. Generally, 
10 program modules include routines, programs, components, data structures, and other 
types of structures that perform particular tasks or implement particular abstract data 
types. 

Moreover, those skilled in the art will appreciate that the invention may be 
practiced with other computer system configurations, including hand-held devices, 

15 multiprocessor systems, microprocessor-based or programmable consumer electronics, 
minicomputers, mainframe computers, and the like. The invention as applied to the 
personal computer of FIG. 1 may also be practiced in distributed computing 
environments where tasks are performed by remote processing devices that are linked 
through a communications network. In a distributed computing environment, program 

20 modules may be located in both local and remote memory storage devices. 

FIG. 1 shows an illustrative computer architecture for a personal computer 100 
for practicing the various embodiments of the invention. The computer architecture 
shown in FIG. 1 illustrates a conventional personal computer, including a central 
processing unit 102 ("CPU"), a system memory 104, including a random access 

25 memory 106 ("RAM") and a read-only memory ("ROM") 108, and a system bus 120 that 
couples the memory to the CPU 102, A basic input/output system containing the basic 
routines that help to transfer information between elements within the computer, such as 
during startup, is stored in the ROM 108. The personal computer 100 further includes a 
mass storage device 110 for storing an operating system 112 and application programs. 

30 The application programs may include a browser 114 such as a conventional web 
browser that may be used to provide the displays of networking address space and a 
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manager application 1 16 that the browser 114 operates upon to render the displays. The 
mass storage device 110 may also store definitional listings of network space usage 
described below in more detail with reference to FIG. 6 that are utihzed by the manager 
application 116. 

5 The mass storage device 1 10 is connected to the CPU 102 through a mass storage 

controller (not shown) connected to the bus 120. The mass storage device 110 and its 
associated computer-readable media, provide non-volatile storage for the personal 
computer 100. Although the description of computer-readable media contained herein 
refers to a mass storage device, such as a hard disk or CD-ROM drive, it should be 

10 appreciated by those skilled in the art that computer-readable media can be any available 
media that can be accessed by the personal computer 100. 

By way of example, and not hmitation, computer-readable media may comprise 
computer storage media and communication media. Computer storage media include 
volatile and non-volatile, removable and non-removable media implemented in any 

15 method or technology for storage of information such as computer-readable instructions, 
data structures, program modules or other data. Computer storage media include, but is 
not limited to, RAM, ROM, EPROM, EEPROM, flash memory or other solid state 
memory technology, CD-ROM, DVD, or other optical storage, magnetic cassettes, 
magnetic tape, magnetic disk storage or other magnetic storage devices, or any other 

20 medium which can be used to store the desired information and which can be accessed by 
the computer. 

Communication media typically embody computer-readable instructions, data 
structures, program modules or other data in a modulated data signal such as a carrier 
wave or other transport mechanism and includes any information delivery media. The 

25 term ^'modulated data signal" means a signal that has one or more of its characteristics set 
or changed in such a manner as to encode information in the signal. By way of example, 
and not limitation, communication media include wired media such as a wired network or 
direct-wired connection, and wireless media such as acoustic, RF, infi-ared, and other 
wireless media. Combinations of any of the above should also be included within the 

30 scope of computer-readable media. Computer-readable media may also be referred to as 
computer program product. 
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The personal computer 100 of FIG. 1 may also include input/output controller 
interfaces 124 for receiving and processing input from a number of devices, including a 
keyboard or mouse (not shown). Similarly, the input/output controller interfaces 124 
may provide output to a display screen 126, a printer, or other type of output device. 
5 Such output may include a display of network space such as that created by the logical 
operations performed by the management application 116 and discussed below. 

As mentioned briefly above, a number of program modules and data files may be 
stored in the mass storage device 110 and RAM 106 of the personal computer 100, 
including an operating system 112 suitable for controlling the operation of a stand-alone 

10 personal computer. The mass storage device 110 and RAM 106 may also store one or 
more application programs such as the browser 114 and manager application 116 that 
creates the visual displays of networking address space. Embodiments of the present 
invention provide program modules for use in conjunction with the manager program 
116. The program modules may implement logical operations such as those of FIGS. 2-5 

15 and 17 to create the various displays of the networking address space. The manager 
program 116 may utilize additional program modules as well such as to perform the 
administration of the networking address space including allocating and reclaiming 
networking address space. 

As an alternative to providing the manager application 116 and related 

20 definitional listings 118 on the mass storage device 110 of the computer 100, these 
resources may be located on a communications network 128 such as the Internet as 
mentioned above. The computer 100 may include a network interface 122 linked to the 
CPU 102 through the bus 120, and the network interface 122 permits data 
communications to occur between programs being performed by the CPU 102, such as 

25 the browser 114, and the resources on the network 128. For example, the network 
interface 122 may utilize Ethernet protocol to communicate with a communications 
gateway of the network 128. 

The resources necessary to provide visual displays of the networking address 
space on the computer 100 may be located on a computer server 130 also in 

30 communication with the network 128. Accordingly, the computer 100 may access the 
resources of the server 130 over the network such as to access appUcation programs and 
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data maintained by the server 130. The server 130 runs an operating system 132 which 
allows the server 130 to communicate with the network 128 to provide access to a 
manager application 134 stored by the server 130. This manager application 134 can be 
run by the browser 1 14 of the computer 100. Furthermore, the server 130 may store the 
5 definitional listings 136 for the networking address space that may be accessed as 
necessary by the manager application 134. 

While the embodiments above refer to the manager application 116 and /or 
manager application 134 as being operated upon by a browser 1 14, it will be appreciated 
that these application programs may instead be implemented as independently operable 

10 computer programs that do not rely upon functionality of a browser. The particular 
implementation is a design choice. However, utilizing the functionality of a browser 
allows the manager application program to be operable across a variety of computer 
platforms without a requiring a different manager application program for each platform. 
The computer 100 or computer 130 may be an administrative computer that issues 

15 the networking address to devices of the network through operation of the manager 
application. Once issued, routers reference routing tables mapping connections to 
networking addresses to deliver packets to the device with a particular networking 
address and receive packets sent by the device to direct them to their destination. Such 
devices may be present on a global network 128 but are confined to subordinate networks 

20 such as local area networks ("LAN*') where a portion of the networking address identifies 
the subordinate network and a remaining portion identifies the device on the subordinate 
network. These devices 1-N of one or more subordinate networks are shown generally in 
FIG. 1 as device set 138. 

FIGS. 2-4 show the logical operations performed by the manager application 

25 when receiving input fi:om a user to specify a map display of networking address space, 
and FIG. 5 shows the logical operations for creating the display that has been specified by 
the user input in a block mode discussed below. The block mode map display is a 
structixred graphical display of relational information, and the structure of the block mode 
map display is discussed below with reference to FIG. 6. As discussed below, the map 

30 display may also be in a utilization mode to indicate percentage of use of address space 
rather than to illustrate the space itself. These logical operations for creating the map 

11 



Atty Docket No. 60088.0001US01 

display that are shown in FIGS. 2-5 are discussed with reference to corresponding 
screenshots provided in FIGS. 7-16, 18, and 19. 

As shown in FIG. 2, initially a tree of the network space being managed is 
provided at display operation 202 and as shown as tree 702 in FIG. 7, The tree 702 is a 
5 visual representation of the hierarchical structure of networks and subordinate networks. 
The rendering and features of the tree 702 are discussed in greater detail below with 
reference to FIGS. 15-17. Definitional information such as that shown in Tables 1, 2, and 
3 discussed below, defines the tree structure and is accessed when rendering the tree 
display. Specifically, Tables 1 and 2 apply to more basic trees that do not provide 

10 information about aggregation while Table 3 applies to more advanced trees that include 
such information as indicators of aggregation and aggregate branch roots. 

Upon displaying the tree 702, a user selection fi^om the tree 702 is received such 
as by the user cUcking on one of the networks of the tree 702 at input operation 204. As 
shown in FIG. 7, the tree 702 includes two root networks named Acme and Merchant. In 

15 the example of FIG. 7, the user has selected the Acme root network and logical operation 
proceeds to display operation 206 where a map of networking address space 704 is 
rendered. Initially, the map may show a zoomed out view of space including the space 
defined for the chosen network or may display a default initial space that may not include 
the space defined for the chosen network. Details of rendering the display of the map are 

20 described in more detail below with reference to FIG. 5. 

While it is described as displaying the map initially based on a selection fi-om the 
displayed tree, it will be appreciated that the map may be displayed without regard to a 
selection fi-om the tree. Furthermore, while the tree structure and map display may work 
in conjunction, it should be appreciated that the tree and map may be independent of one 

25 another, and that the map may be displayed without displaying a tree or the tree may be 
displayed without displaying a map. 

In the examples shown in the screenshots, the initial display provides a set of 
links 706 to the blocks of networking addresses that are defined for the chosen network 
and provides a field 710 where the user may type in the plot range (i.e., the start address 

30 and mask size) to be plotted in the map 704. Selection of the links 706 results in the map 
704 displaying the networking address space that includes the addresses of the links 706 
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and that corresponds to the chosen network. As shown in FIG. 7, the map 704 is 
displaying space containing 256 addresses that includes the local blocks defined for the 
chosen Acme network. 

The initial display also provides a legend 712 that provides the definitions of the 

5 visual indicators, such as color or patterns, that are used to differentiate address space 
blocks having one attribute value firom those having another. For example, "Free" 
networking address blocks are shown in one color while "Allocated" networking address 
blocks are shown in a different color. Thus, someone viewing the map 704 can 
immediately see the relative amount of space having one attribute value versus other 

10 amounts of space having other attribute values. While the examples of the screenshots 
provided herein show only a single attribute being displayed, it will be appreciated that 
multiple attributes for address space within the map may also be displayed. For example, 
a block of addresses may have a particular color indicating a first attribute and may also 
contain a pattern indicating a second attribute. 

15 The initial display of the map also provides zoom capabilities. For example, 

zoom-out selections 728, identified by the mask sizes in bits of classless inter-domain 
routing ("CIDR") addressing for each level of zoom. The smaller the mask size in bits, 
the more zoomed out the map 704 becomes such that a "/O" selection displays the entire 
networking address space. Zooming out based on a zoom out selection 728 is discussed 

20 in more detail below with reference to FIG. 13. Zoom-in is provided by clicking on a 
relevant network grid space of a block on the map 704. Zooming in based on a selection 
of a network grid space of the map is discussed in more detail below with reference to 
FIG. 14. While this example shows fixed zoom increments, the zoom could be based 
upon many other values of 2". 

25 The map 704 shows address space including the networking addresses defined for 

the Acme root network. The resolution of the map 704 is 16 individually selectable 
spaces by 16 individually selectable spaces. Thus, each individually selectable space 
represents an individual networking address. A user may place the mouse pointer on the 
map and allow it to hover over one of the 256 individually selectable spaces. In the 

30 example of FIG. 7, the user has positioned the mouse over the first grid space of the 
block 718 and a tip box 726 is displayed over the map 704 to identify the space the 
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mouse is positioned over. In this example, the mouse is positioned over an individual 
IPv4 networking address of Acme. 

Some of the space in map 704 is shown as not defined for Acme. Currently, the 
map is configured to display only local blocks, those defined for the chosen network, but 
5 not blocks defined in any of the subordinates of the chosen network. A set of user 
selections are provided to allow the user to re-configure the map to be displayed. These 
selections include map space selections for "local blocks" 730, "including descendants" 
732, and "show networks" 734. The current configuration is for the local blocks selection 
730. The including descendants selection 732 causes the blocks of any subordinates that 

10 also fall within the plotted address space to be shown in the plot with the attribute value 
as defined for the subordinate network, and this selection is discussed in more detail with 
reference to FIG. 9. The show networks selection 734 shows both the local blocks and 
the blocks of the subordinates within the plotted address space but the attribute shown 
changes firom current status to current ownership. The show networks selection 734 is 

15 discussed in more detail with reference to FIG. 8. 

In addition to providing the space selections for local blocks, include descendants, 
and show networks as discussed above, the display may also provide mode selections for 
the mapping. A block mode selection 736 and a utilization mode selection 738 are 
provided in this example, and the map 704 is configured according to the block mode 

20 selection 736. Thus, the map 704 is in block format, showing the grid spaces of 
networking address blocks as being selectable and being adjacently displayed within a 16 
X 16 grid of network addresses. As opposed to mapping the address space with 
individually selectable grid spaces within the mapping, utilization mode selection 738 
allows the utilization of the address space to be displayed in a format such as a pie chart 

25 that allows a quick comparison of utilization amounts. Utilization mode is discussed in 
more detail below with reference to FIGS. 10-12. 

Network addresses comprise a linear set of values, and the block mode map 
display of network addresses is in a two-dimensional arrangement such as that shown in 
FIG. 6, which derives firom the customary representation of CIDR addresses as a series of 

30 byte values. The set of 256 possible values for a byte are arranged in a 16x16 grid 602 
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using the most significant bits as one axis 604 and the least significant bits to form the 
second axis 606. 

The 16x16 grid 602 is sufficient to display the attributes of a set of 256 individual 
addresses using visual indicators to differentiate address space blocks having one 
5 attribute value from those having another value of the attribute. For example, "free'' 
addresses are shown in one color while "allocated" addresses are shown in another color. 
FIG. 8, discussed in greater detail below, shows an example of the display 804 with areas 
representing network addresses. An additional visual indicator identifies sets of network 
addresses that function or are represented as a block. For example, outlined rectangle 810 

10 represents a single block composed of 8 addresses. The outline serves as an additional 
indicator to represent sets of related network addresses that are administered as a unit 
referred to as a block. This additional indicator may also represent attributes other than 
the primary visual indicator. For example, an allocated block of 8 addresses is shown as 
a single outlined rectangle, while two adjacent allocated blocks of four addresses are 

15 shown as two outlined rectangles. 

Display 1406 in FIG. 14, discussed in greater detail below, shows a variation of 
the diagram with another dimension of address values. The 16x16 grid of the display is 
indexed by one byte of the network address. Network address formats may have more 
values than may be represented on the display at one time. Each position in the 16 xl6 

20 major grid space may include a smaller 16 x 16 minor grid space of the same layout 
indexed by the next byte of the network address, increasing the amount of addresses that 
may be represented at one time. The plot range 1402 consisting of an address and mask 
determines the values of the positions in the display, and determines the set of values and 
the level of detail that will be shown. 

25 Plot range 1402 specifies that the display 1406 is limited to address block 

192.168.0.0/16. The network portion of the address, 192.168 as determined by the mask 
will be the same for all values represented in the display. The third byte of the address is 
the index for the primary 16x16 grid. The next, or fourth, byte is the index for the 
secondary 16x16 grid within each primary grid position. Block 1408 represents the 

30 smaller block 192.168.120.0/24 which includes a smaller grid representing individual 
network addresses which have different values for the fourth byte. Address blocks 
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smaller than those that can be illustrated completely in the display use a visual indicator 
representing an undersized block present in the grid square. One example of a visual 
indicator is a crosshair symbol centered on the minor grid square contaming the 
undersized block. Multiple minor points containing undersized blocks within a single 
5 major grid square may be represented by an additional visual indicator, for example a 
double crosshair centered on the major grid square. An alternate visual indicator of 
undersized blocks is to draw the data in the minor grid square as a composite of the 
indicators of network addresses in the block. The cross-hair examples are provided 
below with reference to FIG. 24. 

10 Retuming to the operational flow of FIG. 2, when a user provides input through 

the mouse and/or typing a plot range at input operation 208, several query operations 
detect what the input happens to be and performs subsequent operations accordingly. 
Thus, the operational flow branches upon receiving the user input at input operation 208. 
Where the user input positions the mouse pointer over the map in block mode, 

15 then query operation 210 of FIG. 3 detects that the mouse is positioned over a major grid 
square and operational flow proceeds to display operation 212. At display operation 212, 
the origin of the address block that the mouse is positioned over, or the address itself 
where the granularity of the map is down to the individual address, is displayed in the tip 
box such as tip box 726 of FIG. 7. The proper address block to include in the tip box is 

20 determined relative to the display coordinates of the mouse cursor on the display and 
relative to the display coordinates of the map on the display. Thus, if the mouse is at xl, 
yl, then the network block for the major grid space corresponding to the map portion 
displayed at xl , yl is displayed in the tip box. 

If the user mouse cHcks on a portion of the display, query operation 214 

25 determines if there is more detailed data to display. Zooming in to a grid square that does 
not contain visual indicators of blocks would generate a map with no data being 
displayed, so zooming in by clicking on the map can be restricted to only grid squares 
that contain additional data. If there is additional information to display for a grid square, 
then a zoom-in is performed to show the next bj^e of address space notation on the map 

30 at zoom operation 216. Rendering a block mode map, such as upon the zoom-in 
selection is described in greater detail below with reference to FIG. 5. Thus, if a 16 x 16 
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major grid map, representing 256 address x 256 address space, is being displayed and one 
of the 256 network grid spaces is selected, then the map is re-drawn to display a new data 
set limited to the selected grid space. If the new data set includes address values that vary 
by only one byte, then the block mode map is drawn as a 16 x 16 grid space map, 

5 representing 16 address x 16 address space. For example, the map 1306 of the screenshot 
1300 in FIG. 13 shows a "local block" map in block mode for Acme that is zoomed-out 
to a "/16" space with an origin of "192.168.0.0" as noted in the plot range field 1302. 
The blocks 1308 defined for Acme fit within a "/24" space and are shown as a selectable 
grid space of the 16 x 16 map 1306. As shown in the screenshot 1400 of FIG. 14, an 

10 "include descendants" map 1406 in block mode shows the "/24" space 1408 with a start 
address of "192.168.0.0" in the plot range field 1402. This display also provides the tip 
box 1410 showing the start address of the network block 1408 that the mouse is 
positioned over. 

Where the user input received at input operation 208 is a change in the space 

15 selection, such as selecting local blocks, include descendants, or show networks, then 
query operation 218 directs operational flow according to the received space selection. 
Where the space selection is of the local blocks selection 730, then the map is displayed, 
either in block mode or utilization mode as dictated by mode selections 736, 738, at 
display operation 222. Only the local blocks, which are those defined for the chosen 

20 network, are displayed within the map and included in the block and aggregate block 
lists. Rendering the block mode map display is discussed in more detail below with 
reference to FIG. 5. The map 704 of FIG. 7 shows an example, where blocks defined for 
Acme are spread about within the 16 x 16 grid of the map in block mode. Local block 
space selection in utiUzation mode is discussed below with reference to FIG. 10. Areas 

25 714 and 716 of FIG. 7 are shown as not defined since these areas are not designated as 
blocks of the root network Acme. These areas 714 and 716 may be defined for 
subordinate networks of Acme or may be defined for other root networks or subordinates 
of other root networks. However, areas 718, 720 are defined for Acme and contain 
blocks shown in a particular color indicative of the attribute value. 

30 Area 718 is shown as one fi*ee block, while area 720 is shown as several adjacent 

blocks, such as blocks 722 and 724. Block 722 is shown as having an allocated status 



17 



Atty Docket No. 60088.0001US01 

while the other blocks of area 720 are shown as free. While the other blocks of area 720 
are shown as free, they are also divided into multiple blocks for various reasons, such as 
because CIDR arithmetic dictates the valid block sizes and boundaries and adjacent 
blocks cannot coalesce into a larger contiguous block because of an invalid block size 
5 and/or boundary. Also, some blocks may be designated in the definitional list as 
corresponding to a particular allocation unit, such as one LAN segment, and are shown as 
separate blocks to reflect the different allocation units. 

Where query operation 218 detects the user input as a show networks selection 
734, then a map, either in block mode or utilization mode, showing those blocks of the 

10 chosen network and its subordinates is rendered at display operation 224. Again, the 
display of a block mode map is described in detail below with reference to FIG. 5. The 
attribute provided for the blocks in the map is the network to which each block belongs. 
An example of the display for the show networks selection 734 is provided in the 
screenshot 800 of FIG. 8. This map 804 in block mode includes several other blocks than 

15 the map 704 of FIG. 7 since Acme does have subordinate networks that have space 
defined within the "/24" space being shown. A map for the show networks space 
selection in utilization mode is discussed below with reference to FIG. 11. 

The blocks shown in FIG. 8 have a color matching the legend 802 associating 
colors to the corresponding network. The map 804 includes a relatively large contiguous 

20 block 806 that corresponds to a Headquarters subordinate network and a relatively large 
contiguous block 808 that corresponds to an Engineering subordinate network. Smaller 
blocks such as block 810 are also defined for the subordinate networks. While displaying 
the show networks space selection, the user may position the mouse over the map 804 so 
that a tip box 812 is displayed as discussed above to indicate the individually selectable 

25 network grid space, which as shown is an individual networking address. Thus, from 
map 804, an administrator can quickly see the relationship of the addresses for the root 
network and its subordinates. 

When the user input received at input operation 208 is an include descendants 
selection 732, then a map such as map 904 of screenshot 900 of FIG. 9 is rendered at 

30 display operation 220, discussed in greater detail below with reference to FIG. 5 for block 
mode maps. This map 904 is in block mode and displays all of the blocks in the current 
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space that correspond to the root and its aggregate subordinates and continues to show the 
status of each block, such as free or allocated, as was shown for the local blocks only in 
the map 704 of FIG. 7. Maps with the include descendants space selection in utilization 
mode are discussed below with reference to FIG. 12. As shown in the example of FIG. 9 
5 large contiguous blocks 906 and 908 of subordinate networks are shown as allocated. 
Other blocks of subordinates such as block 910 are shown as free. A legend 902 like the 
legend 712 of FIG. 7 is provided to illustrate what status the color indicators of the blocks 
represent. Additionally, a tip box 912 is displayed when the mouse is positioned over an 
individually selectable network grid space, which again is a single networking address in 

10 the example shown. 

When the user input received at input operation 208 is a mode selection, then 
query operation 226 directs the operational flow accordingly. Where the mode selection 
is for block mode, then a map is rendered at display operation 228 in block mode. The 
previous discussions above in relation to local blocks selection 730, include descendants 

15 732, and show networks 734 and that referred to FIGS. 7-9 covered examples of displays 
where the block mode is selected. Thus, for a particular current space selection 730, 732, 
or 734, a block mode map is rendered for that space selection at display operation 228, 
and the details of rendering the block mode map is described in greater detail below with 
reference to FIG. 5. 

20 Where the mode selection is for utilization mode, then a map is rendered at 

display operation 230 in utilization mode. Utilization mode maps may be of various 
forms to show the relative amount of space that has one attribute value versus another. 
However, pie charts are effective utilization mode maps and examples of pie chart maps 
are provided in FIGS. 10-12. Creating the pie charts involves a simple calculation of the 

25 contribution of a block or set of blocks to the whole, where the amount of address space 
of a block or set of blocks is divided by the total amount of address space being displayed 
to calculate the percentages to be used when displaying the pie charts. 

In the screenshot 1000 of FIG. 10, a utihzation mode map 1004 is shown for a 
local blocks space selection for the chosen network, Acme. Thus, the percentages of the 

30 map 1004 pertain only to those blocks of the root network and do not include 
contributions of the subordinate networks. A legend 1002 is provided to indicate what 
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status the colors of the map 1004 represent. The map 1004 in this example includes a 
first pie wedge 1006 that represents the relatively small amount of address space of Acme 
that has been allocated. A second pie wedge 1008 represents the relatively large amount 
of address space of Acme that is free. 
5 In the screenshot 1100 of FIG. 11, a utilization mode map 1104 is shown for a 

show networks space selection of the chosen network. The percentages of the map 1 1 04 
pertain to all of the blocks within the current space that are defined for the root network 
chosen and any blocks of subordinate networks of that root. A legend 1 1 02 is provided 
to indicate what network the colors of the map 1 104 represent. In this example, there are 

10 several subordinate networks of Acme, so there are several different pie wedges within 
the map 1104. Wedge 1106 represents the amoimt of address space defined for Acme 
while the other wedges represent the amounts of address space of the subordinates. For 
example, wedge 1 108 represents the amount of address space defined for a Headquarters 
subordinate while wedge 1110 represents an Accounting subordinate. 

15 In the screenshot 1200 of FIG. 12, a utilization mode map 1204 is shown for an 

include descendants space selection of the chosen network. The percentages of the map 
1204 pertain to all of the blocks within the current space that are defined for the root 
network chosen and any blocks of subordinate networks from that root. A legend 1202 is 
provided to indicate what status the colors of the map 1204 represent. In this example, 

20 there are several aggregate subordinate networks of Acme, but the utiUzation is grouped 
according to status rather than network so that multiple subordinates and the root may 
contribute to a single pie wedge. In this example there are two pie wedges because all of 
the blocks of the root and its subordinate have either a free status or an allocated status. 
The smaller pie wedge 1 208 represents the amount of address space that is free while the 

25 larger pie wedge 1206 represents the amount that has been allocated. 

Where the input received at input operation 208 is a zoom-out selection, such as 
selection 728 of FIG. 7, then the resulting map displayed in block mode covers a plot 
range increased in size as far as is instructed by the selection. A zoom-out selection is 
detected at query operation 232 of FIG. 4. Once a zoom-out selection is detected, then 

30 the block mode map is displayed as zoomed out to the selected mask size at display 
operation 234, wherein the details of rendering a block mode map such as after a zoom 
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out selection is discussed in greater detail below with reference to FIG. 5. For example, 
if the "/O" zoom-out option is selected, then the entire network space is displayed, based 
on the first two significant bytes, within the resulting map, such as "0.0.0.0/0" as the plot 
range for IPv4 space. As shown in FIGS. 13 and 14, where the "/16" is selected for an 
5 IPv4 address space, then the resulting map has a plot range for IPv4 space is 
"###.###.0.0/16" as shown in fields 1302 and 1402, and the map shows the last two bytes 
of this address range on the major and minor grid axes. 

Upon zooming out, the various selections remain available to the user. The space 
selections 730, 732, and 734 remain operable to switch between the options for the 

10 displayed space. As an example, the zoomed-out view in FIG. 13 shows local blocks 
only while the zoomed-out view in FIG. 14 shows local blocks and also includes 
descendants. Furthermore, as shown in FIG. 14, the tip box is displayed when the mouse 
pointer is positioned over a major grid space of the map. Also, when the mouse cursor is 
positioned over a zoom-out selection, such as selection 1312 of FIG. 13 or 1412 of FIG. 

15 14, then a tip box 1310 may be displayed to provide an indication that cUcking on the 
selection will result in a zoomed-out map display. Additionally, the legends 1304 and 
1404 remain for the zoomed-out displays since the major grid spaces 1308 and 1408 
continue to reflect the attribute values based on color within the minor grid spaces. 

When the input received at input operation 208 is a new selection of a range to 

20 plot other than a zoom-in or zoom-out as previously discussed, then query operation 236 
directs the operational flow accordingly. For example, the input may be the user clicking 
on one of the links firom the set 706 or link 708 of FIG. 7 to cause the map to be zoomed 
to the appropriate range and location of address space that covers the chosen network. 
Display operation 238 then renders the map display for that address space, where the 

25 details of rendering a block mode map such as after a link selection are described in 
greater detail below with reference to FIG. 5. As another example, the input may be the 
user entering the start address and mask size in the plot range field 710. In that case, 
display operation 240 then renders the map display for the address space defined by the 
start address and mask, again wherein the details of rendering a block mode map display 

30 such as after a plot range entry are described in greater detail immediately below with 
reference to FIG. 5. 
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The plot range used to determine the scope of the display is a valid CIDR block, 
with a mask restricted to the configured increment. Any address submitted by the input 
field 710, link in address block 706 or 708, or other input such as an active range 
described below with reference to FIG. 20 is converted to a valid CEDR block of an 
5 allowed increment and containing the submitted address. If the plot range is entered 
without a mask size, then the currently selected mask is used. 

FIG. 5 shows the logical operations of an embodiment for rendering the block 
mode map display for the network address space. The block mode map is based upon the 
input provided by the user, such as an initial selection of a network, a plot range entry, a 

10 zoom in or out selection, or a selection of a link for a set of blocks, each of which is 
discussed above. When making such a selection, there is a start address and mask size 
defining a plot range. Thus, the input to the logical operations of FIG. 5 include the start 
address and mask size. From this information, the details of the address space to be 
mapped may be extracted fi"om the definitional information for the address space. Table 

15 1, shown in FIG. 26, which may be a text listing, database, spreadsheet, or other source of 
address information, provides the definitional information of the network space that the 
user may choose to map. As mentioned. Table 1 is a basic table for producing the map 
and tree structure. Table 1 may be broken into two separate tables, the information on the 
left: for generating a map and the information on the right for generating the tree. Table 3 

20 is a more comprehensive table that includes additional information that may be used 
when building the map and tree and interrelating the map and tree such that clicking on 
the tree results in changes to the map. 

As shown in Table 1, this definitional listing corresponds to the screenshots of 
FIGS. 7-15. The definitional listing includes the start address of a block and the 

25 associated mask size for the block. The size in total number of individual addresses may 
also be included in the definitional listing such as to facilitate the computation of the 
percent of usage for a block relative to other blocks of a given address space. Various 
attributes are also specified for the blocks, including the status which may be one of 
various values and the location (i.e., the network that the block is assigned to). The 

30 definitional listing may also include additional information such as for building a network 
tree discussed below with reference to FIGS. 15-17, such as relating each location to a 
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parent location where the subordinate network corresponding to a location is aggregated 
with its parent, and this additional information may also specify the type of network at 
each location. 

Again with reference to FIG, 5, the logical operations for rendering the map 
5 display according to the user input and the definitional information begins at setup 
operation 500 where the viewable portion of the chosen address space from the origin is 
identified. So, when the input is received, the mask identifies the viewable portion based 
on what the map is capable of displaying. In the example screenshots, the map includes 
256 X 256 pixels, providing a 16 X 16 major grid and a 16 X 16 minor grid within each 

10 grid square of the major grid. Thus, two bytes of address space may be displayed in this 
illustrative map. For this example of displaying two bytes, the most two significant bytes 
of the chosen address space are displayed. Where the mask is a /O, then the first and 
second bytes of the address space will be displayed. For a /8, the middle two bytes of an 
IPv4 address will be displayed (i.e., the second and third byte of an IPv4 or IPv6 

15 address). For a /1 6, the last two bytes of an IPv4 address will be displayed (i.e., the third 
and fourth byte of an IPv4 or IPv6 address). Where the mask is a /24, then the last byte 
will be displayed for an IPv4 address, and this last byte will be scaled to fill the map. For 
IPv6 address space, a /24 mask results in the fourth and fifth bytes being displayed. 

Also at setup operation 500, the first address block to display is selected and the 

20 viewable portion of the address is extracted. The information in the text listing is filtered 
so that those blocks that include or are contained within the plot range are included in the 
set to be displayed, and if the "local blocks" selection has been made, then only the 
blocks within the plot range that are assigned in the spreadsheet to the chosen network 
are included in the set. For example, if the map is to display blocks using normalized 

25 plot range 192.168.120.0 /24, then those blocks of this plot range will be included in the 
map upon being filtered from the text listing. From Table 1 , the blocks filtered from the 
text listing to be included in the map would be those within this plot range which include 
192.168.120.144 /28, 192.168.120.208 /28, 192.168.120.224 /30, 192.168.120.228 /30, 
192.168.120.232 /29, and 192.168.120.240 /28. The first address block to display is 

30 found from these addresses filtered from the text listing based on their location within the 
plot range, which in this example is 192.168.120.144 /28. Because the plot range has a 
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mask of /24 in this example, the viewable portion is the fourth and last byte, which is 
.144. 

The reason the first block to display has a first byte of .144 rather than .0 is due to 
the fact that the map in this example is displaying only the local blocks such that the 

5 entire major grid space is not being filled since some of the space is for descendant 
blocks. Had this example been for an "include descendants" map, then the first block 
would have been 192.168.120.0 /26, with the last byte scaled to produce 0.0 /IS, which 
would map to the first row and first column (see FIG. 6). 

At query operation 510, it is detected whether the viewable portion is smaller than 

10 the diagram granularity. Thus, it is determined whether the number of bytes of the 
viewable portion is less than the number of bytes that the map can display. In the 
examples provided herein, the map has a fixed display of two bytes which is beUeved to 
be an optimal amount of information for the display. However, it will be appreciated that 
the displayed map may be larger than 256 pixels by 256 pixels and that the resolution of 

15 the map may itself be a variable that the user can input. In this example, the mask size of 
the origin block is /24 which indicates only a single byte of IPv4 space is available for 
display while the map can display two bytes. Accordingly, query operation 510 detects 
that the viewable portion is smaller than the diagram granularity so operational flow 
transitions to shift operation 520. Had the mask of this example been a /O, /8, or /1 6, then 

20 the viewable portion would be at least two bytes such that operational flow transitions 
directly to start operation 530. 

At shift operation 520, the viewable portion is scaled to the diagram granularity. 
So for a /24 origin block with one viewable byte and a map that displays two viewable 
bytes, then the viewable portion of one byte is scaled to two bytes by shifting the 

25 viewable portion by one byte to the left. The mask size of the current block is reduced by 
8 bits to account for the one byte shift. So the .144 /28 becomes .144.0 /20. The least 
significant byte .0, which will be displayed on the minor grid axes, has a continuous 
value for the entire minor grid within a given major grid space due to the shifting of the 
last byte of actual address space to the left. 

30 At start operation 530, the beginning point of the current adjusted block is 

determined for positioning it on the map at a minor grid data point within a major grid 
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space. The first byte, .144, goes into row 9 and column 0 of the zero-based map (see 
FIG. 6). The last byte .0 maps to row zero and column zero of the minor grid for the 
major grid space at row nine, column zero, which is pixel (0, 144) in the zero-based 256 
X 256 pixel image where each element of the minor grid maps to one pixel. Any 
5 adjustment for mapping pixels to the image may also be performed at this stage wherein 
each element does not map directly to one pixel of the image. The calculations for 
mapping the first and last bytes to the pixel image are discussed below. 

Once the start point has been found at start operation 530, operational flow 
transitions to end operation 540 where the end of the current adjusted block is found. 

10 The end address of the current adjusted block is the first address of the block plus the 
number of addresses as indicated by the mask. Thus, for the .144.0 /20 adjusted block of 
IPv4 space, the end address is the 12 bits (i.e., 32 minus 20) of addresses, i.e. 4096 
addresses, from this start point such that the end point is address .159.255. The first byte 
of this end point, .159, goes in row nine and column 15 (see FIG. 6), The last byte of this 

15 end point goes in row 15 and column 15 of the zero-based minor grid space within the 
major grid square at row 9 and column 15. This end point maps to pixel (255, 159) in the 
zero-based pixel image. Any adjustment for mapping pixels to the image may also be 
performed at this stage. However, mapping 16 x 16 elements in each grid space square of 
a 16 X 16 grid space into a 256 x 256 pixel image means that each data element of the 

20 minor grid corresponds to one pixel, so no adjustment is necessary in this case. 

The pixel positions for the start point and end points of a block may be calculated 
as follows. The major grid row is found by dividing the first block value by the height of 
the major grid to find the integer portion (e.g., 144 div 16 = row 9; 159 div 16 = row 9). 
The major grid column is found by taking the first byte modulo the width of the major 

25 grid (e.g., 144 mod 16 = column 0; 159 mod 16 = column 15). The minor grid row is 
found by dividing the second byte by the minor grid height and taking the integer portion 
(e.g., 0 div 16 = row 0; 255 div 16 = row 15). The minor grid column is found by taking 
the second byte modulo the width of the minor grid (e.g., 0 mod 16 = column 0; 255 mod 
16 = column 15). The X axis starting pixel is then found by multiplying the major grid 

30 column by the pixel width of each major square and then adding the minor grid column 
(e.g., 0* 16 + 0 = X axis pixel coordinate 0). The Y axis starting pixel is found by 
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multiplying the major grid row by the pixel height of each major square and then adding 
the minor grid row (e.g., 9 * 16 + 0 = Y axis pixel coordinate 144). The X axis end pixel 
is found by multiplying the major grid column by the pixel width of each major square 
and then adding in the minor grid column and any fill width, where the fill width is used 
5 to adjust where one data element is greater than one image pixel (e.g., 15 * 16 + 15 + 0 = 
X axis pixel coordinate 255). The Y axis end pixel is found by multiplying the major 
grid row by the pixel height of each major square and then adding in the minor grid row 
and any fill height (e.g., 9* 16+15 + 0 = Y axis pixel coordinate 159). 

Upon finding the start point and end point of the current adjusted block, 

10 operational flow transitions to draw operation 550, where the block is represented within 
the grid space being displayed in one or more various ways. For example, as shown in 
the screenshots, the block is represented by drawing in a boundary rectangle extending 
fi'om the start point of (0,144) in the 256 x 256 pixel image space to the end point of 
(255,159). Furthermore, this rectangle may be filled with the appropriate color based on 

15 the criteria the user has selected for the map and based on the value for the block from the 
spreadsheet. For example, the user may have selected "local blocks" which results in the 
status of the block being found from the spreadsheet, which is "free" for the 
192.168.120.144 /28 block which corresponds to the .144.0 /20 adjusted block being 
rendered. In this example, "free" is represented by green so the block is filled with green 

20 color. 

Upon drawing the block within the grid space, query operation 560 detects 
whether all blocks that have been filtered from the spreadsheet according to the user input 
have been drawn. If all of the blocks have not been drawn, then operational flow 
transitions to next block operation 570 where the next address block of those address 

25 blocks filtered from the spreadsheet is obtained and its viewable portion is extracted. 
Then operational flow returns to query operation 510 to repeat the loop. If all of those 
blocks filtered from the spreadsheet have been drawn, then operational flow transitions to 
display operation 580 where the origin block consisting of all of the adjusted blocks that 
have been drawn is sent to the display for viewing by the user. Additional features may 

30 be added here, by displaying tic marks and a diagram scale for the map, each of which is 
discussed in more detail with reference to FIG. 18. 
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FIG. 18 is a screenshot 1800 illustrating an alternate layout for the map 1804. A 
network has been selected from the tree 1802 to display the map 1804. The map 1804 
includes an outline 1808 of the major grid and also provides tic marks 1806 for both the 
X axis and Y axis. A legend 1816 is provided to define the visual indicators for the 
5 blocks being displayed. In this example, "local blocks" has again been selected to show 
those blocks assigned to the Acme network. Additionally, this map 1804 shows a /24 
address space but provides zoom in/out links 1812 and a zoom in/out level drop down 
menu 1814 that allows the mask to be set to control the zoom in/out. When zooming in, 
the appropriate portion of the map to zoom into may be either a default region, or the 

10 region last selected by the user whose plot range is buffered until replaced with a newly 
selected region. A diagram scale 1810 is also provided for the map 1804 to indicate to 
the user the amount of address space within each major grid square. In this example, the 
diagram scale is a /32 indicating that each major grid square corresponds to a single 
network address rather than a set of addresses. 

15 As discussed above in relation to FIG. 7, a tree 702 showing the hierarchical 

structure of the networks of an orgctnization may be displayed such that the user may 
click on a network of the tree to then begin rendering maps relevant to that network. The 
tree 702 is shown in FIG. 7 in a partially collapsed form. The organization ACME Corp. 
has been expanded to show two root networks, Acme and Merchant where, such as in 

20 FIG. 15, the name 1502 of the network is displayed at a level of the tree. The tree 702 
can be further expanded as shown in the screenshot 1500 of FIG. 15. Here, the tree 702' 
has been expanded further to show all of the subordinate networks 1504 of the Acme root 
and all of the subordinate networks 1506 of those that are subordinate to Acme. 

Within the tree display 702', several controls may be provided. For example, an 

25 expansion/contraction control 1516 may be provided for each network level that has 
subordinates to control whether the subordinates are displayed. Additionally, an expand 
all control 1512 and collapse all control 1514 may be provided to enable the user to 
completely expand or collapse all networks including roots and subordinates for the 
ACME Corp. organization. Additional controls for the tree, such as a restore control and 

30 a collapse to focus control discussed in more detail below, may also be included to 
provide other functionality. 
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The tree display 702* may also provide several visual indicators. For example, a 
symbol 1508 such as a numeral or letter may be listed beside each network to indicate the 
networking address format being used by the network. In this example, "4" indicates that 
IPv4 is being used by the Merchant network. Furthermore, the symbol 1508 may have a 
5 particular color to indicate whether it shares address space with its parent network or has 
separate network space. Alternatively, or in addition to using color for the symbol, an 
additional symbol 1510 may be provided to indicate that the network aggregates with its 
parent network. For example, the symbol 1510 is missing from the Lab subordinate 
network thereby indicating that it does not aggregate with the Engineering network. The 

1 0 tree display 702' of FIG. 1 5 is based upon the text listing shown as Table 1 . 

FIG. 16 is a screenshot 1600 that provides a more complex tree 1601 that includes 
multiple types of IP addressing being used within the ACME Corp. network space. A 
spreadsheet listing, providing the definitional information for the networks of the more 
complex example of FIG. 16 is shown as Table 2 in FIG. 27. The Usting of Table 2 

15 corresponds to the network space available for display. In FIG. 16, the list 1620 of links 
for the blocks includes those that are shown as well as additional ones that are not shown 
because they are located off the displayed page. Those blocks displayed in the list 1620 
and the additional ones not shown account for the address space to be displayed within 
the map based on the selection of the Core network. Table 2 has been truncated to show 

20 those blocks viewable in the list 1620 but omits the additional blocks only for purposes of 
illustration. 

As shown in FIG. 16, the tree 1601 includes the features discussed above in 
relation to FIG. 15. The network name 1602 is specified along with names of 
subordinate networks 1604 upon expanding the root network 1602 to reveal the 

25 subordinates. A network 1606 that is selected by a user for display within the map 1624 
is highlighted to indicate the user has selected this network. Additionally, the 
subordinates 1608 may be revealed for the root network 1606. As shown in FIG. 16, the 
network hierarchy may be such that certain networks utilize one network addressing 
format while other networks use a different network addressing format. In the example 

30 shown, the ACME Corp. addressing space has an Acme root 1602 whose subordinates 
utilize IPv4, a Merchant root 1 605 whose subordinates also utilize IPv4, and a Core root 
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1606 whose subordinates utilize IPv6. The network addressing format indicator 1612 
provides a "6" indicating the use of IPv6. Additionally, the format indicator 1612 may be 
provided in one color versus another to indicate that the network aggregates with its 
parent, and/or a symbol 1614 may be provided to show that the network aggregates with 
5 its parent to account for those users not able to distinguish color. 

Also shown in FIG. 16, the list 1620 of blocks for the chosen network Core is 
displayed along side the map 1624 showing the local blocks. Because Core is an IPv6 
network, the addresses are 128 bits rather than only 32 bits as for IPv4. Accordingly, 
there are zoom-out selections 1622 ranging from /O to /1 28 for this IPv6 space. 

10 Table 3, shown in FIG. 28 below provides an example of a table used when 

building the tree structure and map displays that includes an association of network 
names to IDs, lists the parent ID, the address type, whether the network aggregates, the 
local address blocks of the network, and the associated status of each set of blocks. In 
this example of table 3, the tree structure is included to demonstrate the relationship 

1 5 between the tree structure with icon, expand/collapse control, and network name relative 
to the information of the table that is used when building the tree. 

FIG. 17 shows logical operations of one embodiment for rendering the tree 
display for networking address space such as those trees shown in FIGS. 7-16, 18, and 
19. The logical operations begin at retrieve operation 1702, upon a user initiating the 

20 display of the tree such as by starting the application as noted at display operation 202 of 
FIG. 2, to access the definitional information of the list for the networking address space 
including the root network and all others subordinate to it. When retrieving this 
information, the name, attributes and parent ID is found for each network. As shown in 
Tables 1 and 2, and in an altemative Table 3, for each network, the list includes the name 

25 and also the "type" attribute such as IPv4 or IPv6, as well as the parent ID in Table 3, 
which is associated with the name of the parent network for the current network (e.g., 
Sales has a parent network named Acme). 

When retrieving the information at retrieve operation 1702, this operation may 
allow for various permissions on a per user basis. For example, certain users may not be 

30 given permission to see all networks that are available. For each user, a list of 
permissible networks may be maintained. When fetching the networks for display in the 
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tree, each network fetched from the Usting is compared to the permissible networks for 
the current user to determine whether to display the network that has been fetched. If the 
user has permission to see the current network being fetched, then this network is added 
to the Hst being built for the current user. Otherwise, the current network is not added to 
the list. 

Upon building the list at retrieve operation 1702, the processing of each network 
in the list begins at process operation 1704 to build a list that is a linked structure that 
may be used by one of many well-known tree rendering methods. The processing first 
detects whether there is a parent for the current network being considered at query 
operation 1706. This is detected by referring to the table to see if the parent attribute for 
the current network lists a name/ID of a parent network. If so, then the current network is 
added to the list of children of the linked structxire for the parent network named for the 
current network at list operation 1708. If not, then the current network is added to the list 
of children of the linked structure for the root of the address space at list operation 1710. 

Upon adding the information of the current network to the linked structure, the 
current network is marked within the linked structure either as aggregating with a parent, 
if that is the case, or as an aggregate branch root at marking operation 1712 again by 
referring to information fi'om the table. An aggregate branch root is any network meeting 
any one of the following conditions. It has no parent, it is configured as '*not aggregate," 
or it is not the same address type as its parent. 

Then, the network icon to display for the current network within the tree is 
determined at icon operation 1714, where the type attribute is considered to determine 
whether an icon with a "4" is displayed for an IPv4 type, "6" for IPv6, or other character 
for other types such as an "a" for ASN type branches. The aggregate attribute of the 
current network are also considered to determine whether the icon with a and/or with 
a particular color is displayed based on whether the current network aggregates with its 
parent, if any. Also, the icon may be based on whether the network is an aggregate 
branch root as previously determined. FIG. 19 shows an example screenshot 1900 that 
shows a tree providing branch root icons. The screenshot 1900 includes a tree 1902 that 
lists several networks with associated icons. Icon 1904 for ZAcme and icon 1906 for Lab 
show that both of these networks are aggregate branch roots of ACME Corp. In this 
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example, ZAcme is an aggregate branch root since it has no parent, and Lab is an 
aggregate branch root since it does not aggregate. While ZAcme and Lab or IPv4 
networks, Core is an IPv6 network that is a branch aggregate root as indicated by icon 
1908. 

5 After finding the proper icon to include in the linked structure for the current 

network, then the display state for the current network is determined at state operation 
1716. This step may be done by the client computer even for embodiments that utilize 
the processing of a server to produce the tree display. This involves reading a cookie 
stored on the client computer, a session variable, or other manner of recording whether 

10 this particular branch of the tree being displayed is currently expanded or collapsed. The 
state of the branch of the tree may be affected by multiple stored values. 

Query operation 1718 then detects whether all networks have been processed to 
include them in the linked structure. If not, then operational flow retums to query 
operation 1706 to determine whether the next network of the list has a parent network 

1 5 defined for it that exists in the Ust. If so, then operational flow transitions to display 
operation 1 720, where the tree is displayed according to the linked data for the tree using 
the names and icons that have been previously determined for each level of the tree and 
also based on the current state of the tree (i.e., branches expanded/collapsed) as 
determined at state operation 1716. Display operation 1720 may utilize any of the 

20 commercially available and well-known tree rendering algorithms. 

Additional buttons may then be displayed for "collapse all", "expand all", 
"restore", and others such as "collapse to focus" at button operation 1722. These buttons 
are associated with tree functions to change the display state as detected at state operation 
1716. "Collapse all" collapses all levels of the tree so that only the root is displayed. 

25 "Expand all" expands all levels such that all levels of the tree is displayed. "Restore" 
retums the tree to a previously displayed state by reversing a previous "expand all" or 
"collapse function." "Collapse to focus" expands the path from the root to the current 
network but collapses all others. Within the linked structure being displayed, there is also 
the individual expand/collapse controls for each individual level of the tree. Accordingly, 

30 the tree structure may be displayed as controlled by a user selecting the controls for 
expanding and collapsing. 
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The user may select a network of the tree that is to be displayed in the map by 
clicking on a network displayed within the tree. The network ID of that which is clicked 
is found within the definitional listing of the networks, such as shown in Tables 1 and 2, 
to obtain the information to include in the map once a network has been chosen from the 
5 tree. Accordingly, the user may expand and collapse within the tree as desired to display 
the networks of interest. Upon finding a network of interest within the tree, the user may 
then chck on the network within the tree to cause the map to display the address space for 
the selected network. 

Several enhancements may be provided to the displays of the map of network 

10 address space discussed above. These enhancements are discussed below in relation to 
FIGS. 20-25. As shown in FIG. 20, screenshot 2000 includes a tree 2002 and a block 
mode map 2004. The block mode map includes the local blocks as listed in block list 
2006. Descendants from aggregate block Hst 2008 are not included since the include 
descendants option ("descendants" as shown) has not been selected. The map 2004 

15 includes grid lines 2010 and rulers 2012 for both axes. A menu includes checkbox 2014 
for selecting grid lines 2010, checkbox 2016 for selecting rulers, and checkbox 2018 for 
selecting crosshairs, which are discussed in more detail below with reference to FIG. 24. 
A mask size drop down menu 2028 as discussed above in relation to FIG. 18 is also 
included to allow the plot range to be controlled to zoom in or out. 

20 In addition to these menu selections, the screenshot 2000 provides other inputs for 

plot range control. For example, an active region control 2020 provides a selection to 
enable the user to focus the map to the plot range showing the address space assigned for 
the chosen network from the tree. For example, the user may have entered a plot range 
causing the map 2004 to display address space that is not assigned to the chosen network 

25 of the tree or is not at the proper zoom level to show the complete address space assigned 
to the chosen network. Clicking the active region control 2020 then changes the plot 
range such that the map 2004 displays the network space of the chosen network, where 
the active region that is being displayed is the smallest CIDR block that contains all 
blocks in the selected block list. 

30 FIG. 21 provides a screenshot 2100 that includes a tree 2102 and a block mode 

map 2104. The block mode map 2104 includes the local blocks as listed in block list 
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2106. Descendants from aggregate block list 2108 again are not included since the 
include descendants option has not been selected. The map 2104 lacks grid lines and 
rulers since the user has not selected those options. A menu includes checkboxes for the 
various options that the user may select and also provides an indicator 21 14 of the size of 
5 each major grid square by indicating the mask size. 

In this example, the mouse is hovering over a block on the map which results in 
the tip box 2118 being displayed. In this example, the tip box 2118 is enhanced to 
provide the address for the major grid square the mouse is hovering over and also specify 
the block by listing the start address and mask size. Accordingly, a user can quickly see 

10 the relevant addresses of a block and also see the block definition in the tip box 2118. 

The user can control the address space being displayed within the map 2104 by 
using the various navigational controls, including the active region control 2 1 1 6 as well 
as zoom in and out buttons 21 10, 21 12. The zoom in and out buttons 21 10, 21 12 allow 
the user to zoom in and out by one zoom increment at a time. For example, the zoom 

15 increment may be on a byte boundary. Alternatively, the zoom increment may be 
configured to be based on other values of 2" rather than byte boundaries. Map displays 
that are not based on byte boundaries are discussed below with reference to FIGS. 29-34. 

Zoom out control 2112 functions by decreasing the mask of the current plot range 
by the configured zoom increment, adjusting the address to a valid block that contains the 

20 current block. The zoom in control 2110 increases the mask of the current plot range by 
the configured zoom increment. Each plot range contains multiple smaller ranges of a 
higher mask, so the new plot range for a zoom in is selected according to a focus block 
selected by previous user selections or by default to one of the defined blocks. 

FIG. 22 shows a screenshot 2200 including a network tree 2202 and map 2204 

25 and that also provides an additional enhancement. In this screenshot 2200, the block lists 
2206 and 2208 are enhanced to provide an indication of those blocks that are viewable in 
the currently displayed map 2204. As shown, the visual indication is a bold typeface 
2210 for those blocks shown in the display, while those blocks not shown in the display 
are shown in non-bold typeface 2212. Accordingly, a user can quickly determine which 

30 blocks of the block lists 2206 and 2208 are included in the map being displayed. 
Adjusting the zoom level and/or plot range can vary which blocks are included in the 
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displayed map, so as the map changes based on user input, the visual indication of the 
block list changes accordingly. 

As shown in FIG. 22, the block list 2206 includes the list of blocks defined in the 
selected network, i.e., the "local blocks." Block list 2208 includes the list of aggregate 
5 blocks in the local network disregarding the status or distinct allocations of the individual 
blocks. The blocks are listed with the additional visual indicator, e.g., bold typeface, for 
blocks that are contained within the current plot range and are therefore included in the 
map display. The "descendant" and "network" display modes, which are not selected for 
the example of FIG. 22, use the combined blocks from the current network and its 
10 descendant networks. In such an example of "descendant" or "network" display modes, 
such as shown in FIG. 23, the block lists are updated so that the local blocks list includes 
the list of distinct blocks of the blocks in the current and descendant networks while the 
aggregate block list includes the aggregate blocks of all blocks in the current and 
descendant networks, disregarding status, the owning network, or individual allocations. 
15 FIG. 23 shows a screenshot 2300 that includes a network tree 2302 and a block 

mode map 2304 showing networks including the chosen network from the tree 2302 and 
any aggregate networks. Block list 2308 shows the individual local and descendant 
blocks of the map 2304 while block Ust 2310 shows the aggregate block being displayed. 
This example differs from the example of FIG. 8 in that the legend 2306 lacks any non- 
20 aggregate networks subordinate to the chosen network since the non-aggregate networks 
are not included in the map display 2304 for the chosen network Acme. In this example, 
the Lab network is subordinate to the Engineering network, which is subordinate to the 
chosen Acme network, but Lab does not aggregate with the parent Engineering network. 
Therefore, Lab is not included in the legend 2306 since Lab does not contribute to the 
25 map 2304. 

FIG. 24 shows a screenshot 2400 that includes a network tree 2402 and a block 
mode map 2404. In this example, to assist the user, a first block list 2410 is included to 
show those blocks that are assigned to the chosen network and that are within the plot 
range such that they are within the map 2404. A second block list 2412 is included to 
30 show those blocks that are assigned to the chosen network and that are not within the plot 
range and are not within the map 2404. 
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The block mode map 2404 has crosshairs enable so that undersized blocks 
covered by the plot range are indicated within the map 2404 by single crosshair 2406 or 
double crosshair 2408. Single crosshairs 2406 indicate that there is a single block of 
additional information to be viewed by zooming in on the address space while double 
5 crosshairs 2408 indicate that there are multiple blocks of additional information to be 
viewed. The logical operations for including single or double crosshairs is discussed 
below with reference to FIG. 35. 

The logical operations of FIG. 35 add the single and double crosshairs to the map, 
as necessary, upon the user selecting the crosshairs option, or alternatively by default. 

10 These operations may be performed after those of FIG. 5 have completed rendering the 
map such that the crosshairs are drawn atop the map that has been rendered. The logical 
operations of FIG. 35 begin at block size operation 3502, where it is determined what 
block size is represented by a single data point, i.e., a point within the minor grid space. 
For example, where second and third bytes of IPv4 space are being displayed, then each 

15 data point of the minor grid space represents a /24 space. Then, at fetch operation 3504, a 
list of blocks within the current plot range is fetched from the definitional listing of 
address space such as Tables 1 , 2, or 3 for only those blocks having a size smaller than 
the size represented by a single data point (i.e., those with a larger mask). In the example 
above, those blocks with a mask larger than /24 would be included in the list. As an 

20 alternative, those blocks having the same size as the size represented by the single data 
point may also be added to the list, such that in the example above those with a mask of 
/24 or greater would be included. The Ust of blocks is created in an order sorted by 
address, e.g., from lowest to highest. 

Upon fetching the blocks to create the list, processing of each of the blocks in the 

25 Ust begins at process operation 3506. The processing begins by determining the major 
grid square of the current block being processed at major grid operation 3508, which is 
the first block of the sorted order on the first iteration. This determination is made as 
discussed above in relation to FIG. 5 where the row and column position within the major 
grid space is found for a particular block. Once this major grid space is found, it is 

30 detected whether the next block in the list is in the same major grid square at query 
operation 3510. If not, then the data point within the minor grid space of the major grid 
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space is found at minor grid operation 3512 as discussed above in relation to FIG. 5 
where the row and column position within the minor grid space is found for a particular 
block, and a single crosshair is drawn on the map at this minor grid point. 

After drawing in the crosshair on the map, query operation 3514 detects whether 
5 all blocks of the list have been processed. If so, then the logical operations end. If not, 
then the next block in the list becomes the current block to be considered at block 
operation 3516 and operational flow retums to major grid operation 3508 to determine 
the major grid space for the current block. 

Back at query operation 3510, where it is detected that the next block is in the 

10 same major grid space as the current block, then double crosshairs are drawn within the 
center of the major grid space on the map at major grid operation 3518. This double 
crosshair indicates that there are multiple blocks within the minor points of this major 
grid space. Query operation 3520 then detects whether all blocks of the list have been 
processed. If so, then the logical operations are done. If not, then the next block in the 

15 list becomes the current block to be considered at block operation 3522. Query operation 
3524 then detects whether the next block after the current block in the list is also in the 
same major grid square. Since double crosshairs already indicate multiple blocks at the 
minor point, then there is no need to add additional crosshairs to the major grid square so 
operational flow retums to query operation 3520 in the next block is in the same major 

20 grid square. Upon query operation 3524 detecting that a next block is not in the same 
major grid square, then the next block becomes the current block to be considered at 
block operation 3516. 

FIG. 25 shows a screenshot 2500 that includes a network tree 2502 and a 
utilization mode map 2504. The utilization mode map 2504 is enhanced to include an 

25 indication 2506 of the total number of blocks of addresses represented by the utilization 
map 2504. 

As discussed above, a user may select that the block mode map display a plot 
range that does not fall on a byte boundary. FIGS. 29-34 show various examples of grids 
that may be used to render a map of address space not falling on a byte boundary. In 
30 each example, the start address of each major grid square, which is noted by an offset 
from the start address of the grid space is included to show how the address space is 
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divided among the major grid squares of the major grid space. As noted for each of the 
three examples, when the plot range does not fall on a byte boundary, there are two 
approaches to generating a block mode map. 

FIG. 29 shows an example of a grid system for the block mode map where the 
5 plot range falls on a byte boundary plus two bits. FIG. 29 shows one approach where the 
major grid space is 8 X 8 rather than 16 X 16 for the mask that is a byte plus two bits. 
Each major grid space is representative of the mask for the plot range plus six bits. So, 
for example, where the mask is a /lO (i.e., an /8 plus 2), each major grid space represents 
a/16. 

10 FIG. 30 shows another approach for a grid system for the block mode map where 

the plot range falls on a byte boundary plus two bits. This grid system retains the 16 X 
16 major grid. Each major grid space is representative of the mask plus eight bits. So, 
for example, where the mask is a /lO, each major grid space represents a / 1 8. 

FIG. 31 shows an example of a grid system for the block mode map where the 

15 plot range falls on a byte boundary plus four bits. FIG. 31 shows one approach where the 
major grid space is 4 X 4 rather than 16 X 16 for the mask that is a byte plus four bits. 
Each major grid space is representative of the mask for the plot range plus four bits. So, 
for example, where the mask is a /1 2 (i.e., an /8 plus 4), each major grid space represents 
a/16. 

20 FIG. 32 shows another approach for a grid system for the block mode map where 

the plot range falls on a byte boundary plus four bits. This grid system retains the 16 X 
16 major grid. Each major grid space is representative of the mask plus eight bits. So, 
for example, where the mask is a /1 2, each major grid space represents a /20. 

FIG. 33 shows an example of a grid system for the block mode map where the 

25 plot range falls on a byte boundary plus six bits. FIG. 33 shows one approach where the 
major grid space is 2 X 2 rather than 16 X 16 for the mask that is a byte plus six bits. 
Each major grid space is representative of the mask for the plot range plus two bits. So, 
for example, where the mask is a /14 (i.e., an /8 plus 6), each major grid space represents 
a/16. 

30 FIG. 34 shows another approach for a grid system for the block mode map where 

the plot range falls on a byte boundary plus six bits. This grid system retains the 16 X 16 
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major grid. Each major grid space is representative of the mask plus eight bits. So, for 
example, where the mask is a /1 4, each major grid space represents a /22. 

As discussed above, various embodiments provide visual displays of networking 
address space. The visual information allows the layout of the space and/or its utilization 
5 to be quickly determined. Accordingly, these embodiments may be utilized when 
designing and maintaining networks to improve the efficiency of the design process and 
the operation of the networks. While the embodiments above are discussed in relation to 
IPv4 networking addressing, it will be appreciated that the discussion in relation to IPv4 
is for purposes of illustration only and that these embodiments may be used in 

10 conjunction with networks using ASN, IPv6, or other networking addressing schemes. 

The screen displays and logical operations for receiving user input and creating 
network address displays including tree structures and map displays have been discussed 
in the context of CIDR format IP address space for purposes of illustration only. 
Therefore, it will be appreciated that embodiments of the present invention are operable 

15 in the context of other networking address types as well, such as but not limited to 
telephone numbers, MAC values, serial numbers, and others. 

Although the present invention has been described in connection with various 
illustrative embodiments, those of ordinary skill in the art will understand that many 
modifications can be made thereto within the scope of the claims that follow. 

20 Accordingly, it is not intended that the scope of the invention in any way be limited by 
the above description, but instead be determined entirely by reference to the claims that 
follow! 
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